CVE-2024-42257

ext4: use memtostr_pad() for s_volume_name

published August 8, 2024

CVSS
—
EPSS
0%
Percentile
9.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ext4: use memtostr_pad() for s_volume_name

As with the other strings in struct ext4_super_block, s_volume_name is

not NUL terminated. The other strings were marked in commit 072ebb3bffe6

("ext4: add nonstring annotations to ext4.h"). Using strscpy() isn't

the right replacement for strncpy(); it should use memtostr_pad()

instead.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00202 · 9.6th percentile
Published
2024-08-08T08:50Z
EPSS history
Timeline
  • 08 AUG 08:50Z
    ext4: use memtostr_pad() for s_volume_name
    cvelistv5